level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="979.526µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="51.421µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="998.778µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.031µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.633453ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.69µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.02µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="49.922µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="51.24µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="60.342µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="384.941µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.09µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.986265ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.521755ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.48µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.002µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="218.376µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="87.313µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="59.092µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.64853ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="65.111µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="3.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="25.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.116.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.700219ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.275945ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="10.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.601904ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.291µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="18.96µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.231µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="73.122µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="246.417µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.92µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="177.894µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="776.221µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.027908ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.69µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.02µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.116 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.116 ipAddr.ipv6="" k8sNodeIP=199.204.45.116 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.116" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.195" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.116" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.116} {CiliumInternalIP 10.0.0.195}] 10.0.0.0/24 [] [] 10.0.0.57 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39645" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.496058324s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="36.131µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.54µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="50.882µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="9.701µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.642403847s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.298819ms file-path=/var/run/cilium/state/templates/514b8f1db6d5f66bb6b7c6a6198d5cceb4b65962755e82a4f7dc92eade38befa/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2058 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 d5756793-2f2c-4782-9f1b-5af6e33bba96 default }" containerID=e34801219b90889a8720f0396ff43d75c1f93bc807a9e58bc10dc2b3d7716586 datapathConfiguration="&{false false false false false }" interface=lxca2bef0c7a523 k8sPodName=kube-system/coredns-7c96b6546b-plgx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e34801219b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e34801219b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.176 71dcb64a-7ebf-4810-be01-64a08045ba6d default }" containerID=3987a7e51568a77061819468d412c734d2a03229adaf6bc2cb4ec7c446b5501a datapathConfiguration="&{false false false false false }" interface=lxcc8ae0d966752 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3987a7e515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3987a7e515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e34801219b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=16293 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e34801219b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=16293 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3987a7e515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3987a7e515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 identity=18514 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3987a7e515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 identity=18514 ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.57 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="reserved:health" ipv4=10.0.0.57 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=4 identityLabels="reserved:health" ipv4=10.0.0.57 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.05061524s file-path=/var/run/cilium/state/templates/8b17865655410d29e1f4613f6f56cdce1aac0421e1e918dfa18694aa99113241/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=3987a7e515 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1748 identity=18514 ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3987a7e515 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1748 identity=18514 ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e34801219b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=629 identity=16293 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e34801219b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=629 identity=16293 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1495 identity=4 ipv4=10.0.0.57 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3987a7e515 endpointID=1748 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-r9wlf subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=af718ce8-451c-4b24-8fc4-f91fa26c8a15 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3987a7e515 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1748 identity=18514 ipv4=10.0.0.176 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9wlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 6a6eb4a1-f6ec-4c84-ad81-b2c8b6485fe1 default }" containerID=ba265b1a686a8e30a92b84d48632de1e190793f26b1738ca44e22009a92c9e7a datapathConfiguration="&{false false false false false }" interface=lxc9a24a3d5c3ba k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba265b1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba265b1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba265b1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba265b1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=1354 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba265b1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=1354 ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba265b1a68 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1328 identity=1354 ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba265b1a68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1328 identity=1354 ipv4=10.0.0.42 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2h8j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2058 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02058 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02058 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02058 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02058:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2058 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 a4612d2a-48e5-4c06-b1cb-c44ff517d1c0 default }" containerID=bda4060c9f29d3a9653449f5e2ccb427c83cec3bfd22db14a7c479c7d68293ec datapathConfiguration="&{false false false false false }" interface=lxc84e2e75185ab k8sPodName=kube-system/coredns-67659f764b-4cckx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bda4060c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4cckx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bda4060c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4cckx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bda4060c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identity=16293 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4cckx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bda4060c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identity=16293 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4cckx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bda4060c9f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3145 identity=16293 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4cckx subsys=endpoint level=info msg="Successful endpoint creation" containerID=bda4060c9f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3145 identity=16293 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4cckx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 7428fa71-5f84-4684-9648-8e19c155c236 default }" containerID=8b1f61184518550c113d59acc94640a00c1f8763f7ecd9978265b05559750fb6 datapathConfiguration="&{false false false false false }" interface=lxc3999b9a9a794 k8sPodName=kube-system/coredns-67659f764b-flr42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b1f611845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-flr42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b1f611845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-flr42 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b1f611845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=16293 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-flr42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b1f611845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=16293 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-flr42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b1f611845 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=338 identity=16293 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-flr42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b1f611845 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=338 identity=16293 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-flr42 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 a242ece2-5bce-4e25-9b0a-bedeb8aa32d6 default }" containerID=193a932a635c0b1f8fcc2f78c8b30203c079ba21410f73362198f5122858db70 datapathConfiguration="&{false false false false false }" interface=lxc40586ce142ce k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=193a932a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=193a932a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=193a932a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identity=33266 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=193a932a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identity=33266 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=193a932a63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3715 identity=33266 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=193a932a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3715 identity=33266 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hjqmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e34801219b endpointID=629 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-plgx7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e34801219b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=629 identity=16293 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-plgx7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 183b5055-fef8-448e-a93e-0c92f17f178e default }" containerID=37d7b8577a02a37a3b7a487312bea2b944a295dce6809602d6fe2bbd74f19d3d datapathConfiguration="&{false false false false false }" interface=lxc8f07448a6082 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37d7b8577a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37d7b8577a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37d7b8577a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37d7b8577a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=8820 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37d7b8577a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=8820 ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 82548f10-91dc-4ebf-b2c7-923f8fe7559e default }" containerID=0888f67436d4b5e54f133778b9c6362aee7e2b7dfe1249a63d91a1deae9388ef datapathConfiguration="&{false false false false false }" interface=lxc5cd3a425c0ed k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0888f67436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0888f67436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0888f67436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=2745 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0888f67436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=2745 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 2db6d886-fa11-4dda-b257-359ceff14167 default }" containerID=5dfebb9ddc22eb57f464e32f58dc47f2c5e150dc99e466815a75c9332d0c7f81 datapathConfiguration="&{false false false false false }" interface=lxc6a13bcdadc20 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dfebb9ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dfebb9ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dfebb9ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=13287 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dfebb9ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=13287 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37d7b8577a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3222 identity=8820 ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37d7b8577a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3222 identity=8820 ipv4=10.0.0.197 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-sgrs2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0888f67436 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1253 identity=2745 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=0888f67436 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1253 identity=2745 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-dmv9k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5dfebb9ddc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4092 identity=13287 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dfebb9ddc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4092 identity=13287 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tflcp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 16184a19-f7be-4490-aceb-e6ff4dcac202 default }" containerID=3d39ee549fbd674c195c0daec1844c4d84f03849aab71ddc6e74e5ff3983c39b datapathConfiguration="&{false false false false false }" interface=lxc39db211f4fb8 k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d39ee549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d39ee549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d39ee549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=30339 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d39ee549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=30339 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d39ee549f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1362 identity=30339 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d39ee549f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1362 identity=30339 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d39ee549f endpointID=1362 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7xj6m subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=95bf53f1-4ea4-4e52-bb57-7d6246a77e0f k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3d39ee549f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1362 identity=30339 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xj6m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 cb76fa45-6611-4b3a-9b72-ed50c383498a default }" containerID=e940e9d66509b294f4293adbdf6a44f7be2416dbdb1bbc096057b83738d97ac2 datapathConfiguration="&{false false false false false }" interface=lxc6cc707b313f3 k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e940e9d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e940e9d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e940e9d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=11980 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e940e9d665 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=62 identity=11980 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e940e9d665 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=62 identity=11980 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e940e9d665 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=62 identity=11980 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v subsys=daemon level=info msg="Delete endpoint request" containerID=e940e9d665 endpointID=62 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-wpn9v subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1e3c7d26-5c34-4f76-8ed6-b33c65d35f3e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=e940e9d665 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=62 identity=11980 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wpn9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 daea27b6-7775-4b44-ae1f-f8379d62a4cf default }" containerID=75024a4de9773ab510728a7c7f9a60c4d7a1ff4185892b5f522add699ccae7a0 datapathConfiguration="&{false false false false false }" interface=lxce6a42627c2dc k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75024a4de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75024a4de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75024a4de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=8925 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=75024a4de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=8925 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75024a4de9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=150 identity=8925 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=75024a4de9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=150 identity=8925 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkmxf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 f3b2268b-b160-4932-8cc0-1a9bdae7ac07 default }" containerID=bf0b1c0a128eb742dc4386ad2bf308b66d694cb2eb35c7a353833a50d95fb0a0 datapathConfiguration="&{false false false false false }" interface=lxc146398ee483a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf0b1c0a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf0b1c0a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf0b1c0a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=1072 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf0b1c0a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=1072 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf0b1c0a12 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1281 identity=1072 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf0b1c0a12 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1281 identity=1072 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf0b1c0a12 endpointID=1281 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-8p9qb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=408b29f5-0d4b-4409-be6e-08d5fffcf4ab k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=bf0b1c0a12 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1281 identity=1072 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8p9qb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 710ad686-2639-45cf-bc32-8e4200d257d7 default }" containerID=5d54d4ca3dc7139b2b0efe943519276852f88e030dd129d1db3c50b3b1385693 datapathConfiguration="&{false false false false false }" interface=lxcd78be116e0e4 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d54d4ca3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d54d4ca3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d54d4ca3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=64836 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d54d4ca3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=64836 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d54d4ca3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=234 identity=64836 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d54d4ca3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=234 identity=64836 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-ld696 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 369cfc27-eeb9-4ed5-9b25-bfc2485aa112 default }" containerID=3bba32bae27336eec73746e94fea901aba3e11c24704b5904bf2e2b24654fdb0 datapathConfiguration="&{false false false false false }" interface=lxc55feb4ba5f6d k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bba32bae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bba32bae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bba32bae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=21585 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bba32bae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=21585 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bba32bae2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1224 identity=21585 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bba32bae2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1224 identity=21585 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-86zxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 6f58284a-f0bd-42ee-8a92-396beafbeac3 default }" containerID=0d39925e23e0c52eaaf2efe30ef8079f2ede1e4915a232b4f3e45d37787e83f3 datapathConfiguration="&{false false false false false }" interface=lxcee2e45f439d4 k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d39925e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d39925e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d39925e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=47897 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d39925e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=47897 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0d39925e23 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2059 identity=47897 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d39925e23 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2059 identity=47897 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-jm8v7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 e8c75837-ee88-4d38-b546-00deb34ce5e6 default }" containerID=dfea81fa6e5a0c40d9fc49fd8a3771ab9ef7c59277847bd8c3d6b1097aed3b33 datapathConfiguration="&{false false false false false }" interface=lxc88a014931ea3 k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfea81fa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfea81fa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=dfea81fa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dfea81fa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfea81fa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identity=33083 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfea81fa6e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2568 identity=33083 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfea81fa6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2568 identity=33083 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 2cf29f50-5cc6-4858-90df-15435b0d2c3f default }" containerID=9ecfba350dda24b340c47a5da9623741c25531c44b57ebd6b704e32daf5e3b13 datapathConfiguration="&{false false false false false }" interface=lxcb4d12fd90ab3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ecfba350d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ecfba350d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ecfba350d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=11214 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ecfba350d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=11214 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ecfba350d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3446 identity=11214 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ecfba350d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3446 identity=11214 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dfea81fa6e endpointID=2568 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dfea81fa6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2568 identity=33083 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81c7e4fc-f106-4c48-9f26-661b53714a92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 a7179f5f-4ac5-491a-b6a9-a4cce7e13f6d default }" containerID=a350b2c7e9f554a2ccf4ee1b70153154270ede4c30e56bcdb2ad6f31a4b05112 datapathConfiguration="&{false false false false false }" interface=lxc8b7358d09a66 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a350b2c7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a350b2c7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a350b2c7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 identity=7740 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a350b2c7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 identity=7740 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a350b2c7e9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1838 identity=7740 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a350b2c7e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1838 identity=7740 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 1725f2d7-1a3a-4eb7-962b-f090c449101b default }" containerID=95b336ecc2b4a06de70c2a6aa4b922edbd4352522e4e81b4f780e54fd4e6d0f3 datapathConfiguration="&{false false false false false }" interface=lxc7dcc37b030fb k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95b336ecc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95b336ecc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=95b336ecc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=95b336ecc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=2009 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95b336ecc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=2009 ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95b336ecc2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=274 identity=2009 ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95b336ecc2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=274 identity=2009 ipv4=10.0.0.85 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 90aae501-ee04-4a97-a844-7d43bb34b85e default }" containerID=8882cd9c320ea0d57f3ff730bc6a9b4853b644ad34736566720cc60f141e059c datapathConfiguration="&{false false false false false }" interface=lxcd406cd31274d k8sPodName=monitoring/node-feature-discovery-worker-2zhqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8882cd9c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zhqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8882cd9c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zhqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8882cd9c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=38157 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zhqf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8882cd9c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=38157 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zhqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 1065bf98-85a5-48b7-8483-991ade288cc4 default }" containerID=041d9c5e26868e0f553b6d8263853a3f473b3a6403fc54dad8f52f0cf505d78d datapathConfiguration="&{false false false false false }" interface=lxc55ceb89aee79 k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=041d9c5e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=041d9c5e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=041d9c5e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=47861 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=041d9c5e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=47861 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8882cd9c32 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3488 identity=38157 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zhqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8882cd9c32 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3488 identity=38157 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zhqf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=041d9c5e26 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=596 identity=47861 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=041d9c5e26 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=596 identity=47861 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-hrht6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 c9033e78-b479-44a3-bbfe-6c69a71e987d default }" containerID=a1060a5316f18eb5237933129a20b59ddfb2d9c08d0e50b05f983684d869b9e4 datapathConfiguration="&{false false false false false }" interface=lxc15de80897507 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1060a5316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1060a5316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1060a5316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=60053 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1060a5316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=60053 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1060a5316 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1097 identity=60053 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1060a5316 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1097 identity=60053 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqm4t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2058 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02058 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02058 subsys=bpf level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02058 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02058:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2058 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010253358042393171 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.216 91eb6b3c-da7b-42f6-aab4-933767be6252 default }" containerID=ffe48d16766bf632b329706fd95eac41b984695825af9c129482fd5216258d19 datapathConfiguration="&{false false false false false }" interface=lxc1cb102d119cc k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffe48d1676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffe48d1676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3a176326-31a4-425d-91d1-8759d148b58a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=3a176326-31a4-425d-91d1-8759d148b58a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=3a176326-31a4-425d-91d1-8759d148b58a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=3a176326-31a4-425d-91d1-8759d148b58a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffe48d1676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=30301 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3a176326-31a4-425d-91d1-8759d148b58a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=3a176326-31a4-425d-91d1-8759d148b58a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffe48d1676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=30301 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ffe48d1676 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3676 identity=30301 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffe48d1676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3676 identity=30301 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ffe48d1676 endpointID=3676 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-bvvvc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=3a176326-31a4-425d-91d1-8759d148b58a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=3a176326-31a4-425d-91d1-8759d148b58a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ffe48d1676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3676 identity=30301 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bvvvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 d66adaf5-1f42-467f-b094-6ec12bcdfe3e default }" containerID=a9f56ee281bfecb04f05293b6bd291d7cee40c0fb6c3c3055f8233203ec3ff62 datapathConfiguration="&{false false false false false }" interface=lxc2e83ee2e5410 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9f56ee281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9f56ee281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9f56ee281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 identity=4530 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9f56ee281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 identity=4530 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 a524e3c3-8b7e-46ee-b626-7f9d50c7cf95 default }" containerID=b92ed01e9ef08d5ec9f25a4fb509770758bbf5a58ff9216f23283c65b289495c datapathConfiguration="&{false false false false false }" interface=lxcf87172aba363 k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b92ed01e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b92ed01e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b92ed01e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=36616 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b92ed01e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=36616 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9f56ee281 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3125 identity=4530 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9f56ee281 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3125 identity=4530 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-mgjxx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b92ed01e9e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=535 identity=36616 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 0a5a0d3a-ad71-42f5-b8cc-7d360ed92be1 default }" containerID=44b99d0e81540436b95b047439ab8ed8a75db331afe9fb8d2a88679745e3cc8e datapathConfiguration="&{false false false false false }" interface=lxcaf676ceee72f k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt labels="[]" subsys=daemon sync-build=true level=info msg="Successful endpoint creation" containerID=b92ed01e9e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=535 identity=36616 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c4989f8d5-tf2t4 subsys=daemon level=info msg="New endpoint" containerID=44b99d0e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44b99d0e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44b99d0e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=9335 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44b99d0e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=9335 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44b99d0e81 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1630 identity=9335 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=44b99d0e81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1630 identity=9335 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-dnfrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 e4b5405f-d14a-4949-be83-c33329e9e134 default }" containerID=4191ef8fa6538d120a19f526a33feabf03b287cbf104cc195ca02393bd3530ef datapathConfiguration="&{false false false false false }" interface=lxcdec5e00ff428 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4191ef8fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4191ef8fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4191ef8fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identity=30252 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4191ef8fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identity=30252 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4191ef8fa6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2018 identity=30252 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4191ef8fa6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2018 identity=30252 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4191ef8fa6 endpointID=2018 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rkpkg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=d5a99291-5f8a-4031-a695-46233b4665c8 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4191ef8fa6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2018 identity=30252 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rkpkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 3c2a2d99-38e4-4cc6-b1a7-6e771b9a600d default }" containerID=47934501dc1ebd58ff8463e41cfd4d37a4e123309ac06d209496ab18c52db4f7 datapathConfiguration="&{false false false false false }" interface=lxcb0424ac44a66 k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47934501dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47934501dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47934501dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47934501dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=33083 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47934501dc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1310 identity=33083 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=47934501dc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=33083 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 71d5cc18-c2c5-4d89-82b4-d91703f7c77b default }" containerID=7dc32ef6b8a8dd81fccc776cd50b0ed29b67eecaa1e84c3f2cf50960b233e5dc datapathConfiguration="&{false false false false false }" interface=lxce12f605e2af6 k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dc32ef6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dc32ef6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7dc32ef6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dc32ef6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=33083 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dc32ef6b8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=244 identity=33083 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dc32ef6b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=244 identity=33083 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=daemon level=info msg="Delete endpoint request" containerID=47934501dc endpointID=1310 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=7dc32ef6b8 endpointID=244 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=47934501dc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=33083 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-38ce629e-8da1-4c41-bd3d-9a1afae0e7fd subsys=endpoint level=info msg="Removed endpoint" containerID=7dc32ef6b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=244 identity=33083 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f681d0fc-c524-4171-a84f-088081ece0a9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 71de0701-a33a-4f64-bd33-fd71bb9c8596 default }" containerID=e4218d4d3404b03addd98a00304ab4668dfcc991922df891059c546c4176fd28 datapathConfiguration="&{false false false false false }" interface=lxce22da2f95a68 k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4218d4d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4218d4d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4218d4d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identity=62934 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e4218d4d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identity=62934 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 bbee27fe-d9e3-4165-a1b0-791372cce507 default }" containerID=0fefb0723b2d204301fb7fd84d40a5d5840aaa0f5e97e40497a7576edabc9f4a datapathConfiguration="&{false false false false false }" interface=lxc194973fccff5 k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fefb0723b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fefb0723b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fefb0723b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fefb0723b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identity=33083 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4218d4d34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2454 identity=62934 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4218d4d34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2454 identity=62934 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-k9zxw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0fefb0723b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3080 identity=33083 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fefb0723b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3080 identity=33083 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 20e1407f-2b7a-4a84-b60f-d6da122a272a default }" containerID=c1964e3f8b3f76e7fee6f74d0006d9acde81ae687aa0b57d327cb92811baadf6 datapathConfiguration="&{false false false false false }" interface=lxc77f44a291bfa k8sPodName=monitoring/vector-g776b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1964e3f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-g776b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1964e3f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-g776b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1964e3f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=55945 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-g776b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1964e3f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=55945 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-g776b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1964e3f8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1044 identity=55945 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-g776b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1964e3f8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1044 identity=55945 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-g776b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 7e22fa99-3f03-4a72-8141-d2d886ad797c default }" containerID=d02c72f3780ae3c52b41e3dc89ac410326261af1b76e97b24724ab043072481b datapathConfiguration="&{false false false false false }" interface=lxcc62fffa95e88 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d02c72f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d02c72f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d02c72f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=6523 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d02c72f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=6523 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d02c72f378 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1631 identity=6523 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d02c72f378 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1631 identity=6523 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 d8b2bc37-a950-4a4f-b7cb-fbfdc6399c6c default }" containerID=296039a30f87d0588ff0028a714ded8fcce98de3ecbe18fee32e2a9e5620ca1c datapathConfiguration="&{false false false false false }" interface=lxc6676209ce8a9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=296039a30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=296039a30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=296039a30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=296039a30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 identity=58040 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=296039a30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 identity=58040 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=296039a30f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3658 identity=58040 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=296039a30f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3658 identity=58040 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Delete endpoint request" containerID=0fefb0723b endpointID=3080 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0fefb0723b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3080 identity=33083 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49699069-c603-4c8a-ab24-1347cfdb359f subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 9ed7fd19-bae3-4a34-8a2c-027ff2e4e88e default }" containerID=eb6a8751a32052eaaff6cb3e0fa73d423cd60d168e6dae27a414dd306586d722 datapathConfiguration="&{false false false false false }" interface=lxc0b995325441c k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb6a8751a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb6a8751a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb6a8751a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb6a8751a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=61195 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb6a8751a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=61195 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb6a8751a3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1684 identity=61195 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb6a8751a3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1684 identity=61195 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 799c0ad3-847d-4866-87da-785417ab9173 default }" containerID=630ced1682ec89b704e1bb0f04d20e03341feecb26c609715b2971faf7c227bf datapathConfiguration="&{false false false false false }" interface=lxcc117e21ffad3 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=630ced1682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=630ced1682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=630ced1682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=5360 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=630ced1682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=5360 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=630ced1682 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3050 identity=5360 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=630ced1682 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3050 identity=5360 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-j79cc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 717a73e7-3af2-4db0-aafd-6ac43034f2ec default }" containerID=61aeaafd449ebad5c2a4314f04db72566486160b3fc44e4ec94c471de525ed0a datapathConfiguration="&{false false false false false }" interface=lxcc43d0fd1f1f4 k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61aeaafd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61aeaafd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61aeaafd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=36088 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61aeaafd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=36088 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61aeaafd44 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=539 identity=36088 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=61aeaafd44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=539 identity=36088 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-m2kmv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 709ddd57-7f73-4445-bada-8e45f6b04dca default }" containerID=180ce20a79de47aa0419080f9cd79ea076180c1a105fea8e7fcfcc0898e3d8ec datapathConfiguration="&{false false false false false }" interface=lxcb77de9b31b18 k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=180ce20a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=180ce20a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=180ce20a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=180ce20a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=33083 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=180ce20a79 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1269 identity=33083 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=endpoint level=info msg="Successful endpoint creation" containerID=180ce20a79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1269 identity=33083 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=daemon level=info msg="Delete endpoint request" containerID=180ce20a79 endpointID=1269 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=180ce20a79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1269 identity=33083 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0dafa89-233c-4b1e-bb43-7814fe5c466d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 5075fc5f-217d-490a-a42a-282c04932c97 default }" containerID=64cb77c6eab5a27aed8d400c7ffcef1503efe159f500f562cc3845d359a78ea3 datapathConfiguration="&{false false false false false }" interface=lxcb2a41182f656 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64cb77c6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64cb77c6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64cb77c6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64cb77c6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=46570 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64cb77c6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=46570 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64cb77c6ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2146 identity=46570 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64cb77c6ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2146 identity=46570 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 a22fb1ee-b138-4934-8d50-09d1aec30d95 default }" containerID=ae05ecec40c14244b917195ba6d9fed5d094741f1e367914f258495bf885eb86 datapathConfiguration="&{false false false false false }" interface=lxc45c6d9b3a186 k8sPodName=openstack/keystone-api-659fc877dc-hkrqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae05ecec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-api-659fc877dc-hkrqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae05ecec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-api-659fc877dc-hkrqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae05ecec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=55692 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-api-659fc877dc-hkrqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae05ecec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=55692 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-api-659fc877dc-hkrqz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 7c3bcb31-14de-4261-8232-4c800dde5518 default }" containerID=fc923e8558bd1e7c786834d0f9b49812deed624ce285598997c8e130751dd458 datapathConfiguration="&{false false false false false }" interface=lxc83b907d48b5e k8sPodName=openstack/keystone-credential-setup-xpdsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc923e8558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc923e8558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc923e8558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=30842 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc923e8558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=30842 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae05ecec40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=537 identity=55692 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-api-659fc877dc-hkrqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae05ecec40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=537 identity=55692 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-api-659fc877dc-hkrqz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc923e8558 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1376 identity=30842 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc923e8558 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1376 identity=30842 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc923e8558 endpointID=1376 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xpdsh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=56fc35d4-bdb6-4b35-95b9-789c2412c771 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fc923e8558 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1376 identity=30842 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-xpdsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 004f8fd4-0418-48e3-ab5a-fa54eaaf61b7 default }" containerID=753b1488fe84864815813a2a8c948626bc6a23911e9fee4869e4e4363f2e111c datapathConfiguration="&{false false false false false }" interface=lxce9e9914d94d4 k8sPodName=openstack/keystone-db-init-9wt49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=753b1488fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=753b1488fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=753b1488fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=47356 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=753b1488fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=47356 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=753b1488fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1259 identity=47356 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=753b1488fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1259 identity=47356 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=753b1488fe endpointID=1259 k8sNamespace=openstack k8sPodName=keystone-db-init-9wt49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a424be2c-bc5a-468c-a8ef-8def7e6331ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=753b1488fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1259 identity=47356 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-9wt49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 4e2e8ac1-d59c-48a5-997e-e678974e7ba9 default }" containerID=36cd39374295b54c0ebc74430f6d40d9062073fa852dba4227bd4327ba951d50 datapathConfiguration="&{false false false false false }" interface=lxcb963d3f352a6 k8sPodName=openstack/keystone-fernet-setup-l5qwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36cd393742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36cd393742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36cd393742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identity=10303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36cd393742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identity=10303 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=36cd393742 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2445 identity=10303 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=36cd393742 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2445 identity=10303 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb subsys=daemon level=info msg="Delete endpoint request" containerID=36cd393742 endpointID=2445 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-l5qwb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a9b3f2b3-bb2c-4df4-abfd-7eec8b098331 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=36cd393742 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2445 identity=10303 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5qwb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 7428f5a8-2499-48d7-9ca3-efc0e1835ee7 default }" containerID=8beef78b0170d752b137c162c269ce9f1952ec4567283f17ebb77ad0f6967c37 datapathConfiguration="&{false false false false false }" interface=lxc3691e03c4ee5 k8sPodName=openstack/keystone-db-sync-cxfxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8beef78b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8beef78b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8beef78b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=25732 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8beef78b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=25732 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8beef78b01 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=903 identity=25732 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8beef78b01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=903 identity=25732 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8beef78b01 endpointID=903 k8sNamespace=openstack k8sPodName=keystone-db-sync-cxfxz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=3048b223-2dde-44ea-8ab9-e3a778bcdd75 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8beef78b01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=903 identity=25732 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-cxfxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 46e7415a-1ab1-4869-ae9e-24b63a7226b1 default }" containerID=2987645eaed1084a2c06b1042bfdb629c25bea51ee6fdc5b02fd8f94de92d2dd datapathConfiguration="&{false false false false false }" interface=lxc34bfe4f631c4 k8sPodName=openstack/keystone-rabbit-init-fldr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2987645eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2987645eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2987645eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2987645eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=11523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2987645eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=11523 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2987645eae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1163 identity=11523 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2987645eae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1163 identity=11523 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2987645eae endpointID=1163 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fldr2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4f4fe3ee-d06d-4852-aaed-ad99acf17ac8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2987645eae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1163 identity=11523 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-rabbit-init-fldr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 68161a4d-d337-4cfb-9aed-400cf0caebd8 default }" containerID=9da6000860ab4d514513b7627d79a685a9b82c267b2f1639bd05e6e7f6a00162 datapathConfiguration="&{false false false false false }" interface=lxcd0b179cc21e1 k8sPodName=openstack/keystone-domain-manage-s52nx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9da6000860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9da6000860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba922e52-017b-47e7-960f-fec53de7c435,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ba922e52-017b-47e7-960f-fec53de7c435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ba922e52-017b-47e7-960f-fec53de7c435;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ba922e52-017b-47e7-960f-fec53de7c435;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9da6000860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=23731 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba922e52-017b-47e7-960f-fec53de7c435,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ba922e52-017b-47e7-960f-fec53de7c435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9da6000860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=23731 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9da6000860 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3583 identity=23731 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9da6000860 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3583 identity=23731 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9da6000860 endpointID=3583 k8sNamespace=openstack k8sPodName=keystone-domain-manage-s52nx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ba922e52-017b-47e7-960f-fec53de7c435 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ba922e52-017b-47e7-960f-fec53de7c435 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9da6000860 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3583 identity=23731 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-s52nx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 adbeea5b-b371-4d8f-90e1-0fa5520af106 default }" containerID=db5ed37065ef538c0672ef3bb1666ce692860aa203911eed08b6ed569d5c73df datapathConfiguration="&{false false false false false }" interface=lxcec28b20671c5 k8sPodName=openstack/keystone-bootstrap-z4pgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db5ed37065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db5ed37065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ce348967-c693-4921-9603-955c81ee473b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ce348967-c693-4921-9603-955c81ee473b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ce348967-c693-4921-9603-955c81ee473b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ce348967-c693-4921-9603-955c81ee473b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db5ed37065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=31701 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ce348967-c693-4921-9603-955c81ee473b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ce348967-c693-4921-9603-955c81ee473b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db5ed37065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=31701 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=db5ed37065 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2104 identity=31701 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=db5ed37065 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2104 identity=31701 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db5ed37065 endpointID=2104 k8sNamespace=openstack k8sPodName=keystone-bootstrap-z4pgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ce348967-c693-4921-9603-955c81ee473b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=ce348967-c693-4921-9603-955c81ee473b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=db5ed37065 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2104 identity=31701 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-z4pgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 db7cd807-8443-490a-8552-de8098cd0184 default }" containerID=41c3cf37ddc355d4836c96d85610f517731d18792a6edbf1646941d3a415910b datapathConfiguration="&{false false false false false }" interface=lxc899761320f0f k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41c3cf37dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41c3cf37dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41c3cf37dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41c3cf37dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=33083 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41c3cf37dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=123 identity=33083 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=41c3cf37dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=123 identity=33083 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=daemon level=info msg="Delete endpoint request" containerID=41c3cf37dd endpointID=123 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=41c3cf37dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=123 identity=33083 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9448b698-6a70-482d-876b-aac792d9a1dd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 f0544d9e-a07d-4f28-a2d6-d6167d334f09 default }" containerID=af478fcd7d9f00c74a63baa902c17fd1dade41bb9bbdf683d5b90d20c614eb8b datapathConfiguration="&{false false false false false }" interface=lxcf17a24ffbfbf k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af478fcd7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af478fcd7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af478fcd7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=11845 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af478fcd7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=11845 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=af478fcd7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=311 identity=11845 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af478fcd7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=311 identity=11845 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 c8427adc-cc91-46b0-9b72-ac6203c4a88c default }" containerID=1d32c13538aed67da84c0b43d39a812dd1c9b1986da60f504232b374e4da4a0d datapathConfiguration="&{false false false false false }" interface=lxcea773f02dc68 k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d32c13538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d32c13538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d32c13538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=26173 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d32c13538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=26173 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 05f99a64-9982-4aee-9a6f-be5763ac9bd2 default }" containerID=d6bf7c69beacaad98ebfde3cde9be997fe4de640143b3824ccab4f4668fd4fc5 datapathConfiguration="&{false false false false false }" interface=lxc688c980cecd9 k8sPodName=openstack/barbican-db-init-nqd8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6bf7c69be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6bf7c69be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6bf7c69be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=6479 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6bf7c69be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=6479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d32c13538 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=569 identity=26173 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d32c13538 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=569 identity=26173 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-8cfbd4c59-v5dcs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6bf7c69be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=841 identity=6479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6bf7c69be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=841 identity=6479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6bf7c69be endpointID=841 k8sNamespace=openstack k8sPodName=barbican-db-init-nqd8k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=61dfaa8e-b75b-4f2f-9996-e5cb41f4aac0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d6bf7c69be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=841 identity=6479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-init-nqd8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 0c9b59b2-bb53-4d22-86fc-8c22bc27e46c default }" containerID=0322a2b7621f815f1833d29e3dd439107de890c023b8d76089c246f3b3594313 datapathConfiguration="&{false false false false false }" interface=lxc2f05c1d94c92 k8sPodName=openstack/barbican-db-sync-wxlzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0322a2b762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0322a2b762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0322a2b762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0322a2b762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=13419 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0322a2b762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=13419 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0322a2b762 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3516 identity=13419 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0322a2b762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3516 identity=13419 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0322a2b762 endpointID=3516 k8sNamespace=openstack k8sPodName=barbican-db-sync-wxlzp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=09ff3731-f60c-438c-bcf7-b54ca80d8d61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0322a2b762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3516 identity=13419 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-sync-wxlzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 941b3182-d892-4e38-86d0-637cdb82a0f9 default }" containerID=1a74bd9c59c60068aeb0097c9d0fcb884190328fe57da265269cd1d1ec7e0e12 datapathConfiguration="&{false false false false false }" interface=lxc60ac91e9b240 k8sPodName=openstack/barbican-rabbit-init-sh2rm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a74bd9c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a74bd9c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1a74bd9c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a74bd9c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=12725 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a74bd9c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=12725 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a74bd9c59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3921 identity=12725 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a74bd9c59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3921 identity=12725 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a74bd9c59 endpointID=3921 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-sh2rm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2b386ae6-e633-430f-9c64-40c9aae31d1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1a74bd9c59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3921 identity=12725 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-sh2rm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 5547b0c0-55c5-4e26-88ab-3162cf33ec84 default }" containerID=36dbbb125d8b98c536a82cb2b2dc685e1dbae9325c3f7efd5a1d917835c18312 datapathConfiguration="&{false false false false false }" interface=lxc5232290d3ea6 k8sPodName=openstack/barbican-ks-service-m8zlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36dbbb125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36dbbb125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36dbbb125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36dbbb125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identity=46476 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36dbbb125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identity=46476 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36dbbb125d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1828 identity=46476 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=36dbbb125d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1828 identity=46476 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36dbbb125d endpointID=1828 k8sNamespace=openstack k8sPodName=barbican-ks-service-m8zlh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=65775839-2a59-4d55-a8d9-e0b3790de3e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=36dbbb125d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1828 identity=46476 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-m8zlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 fce7ba99-a666-41be-96ea-f915f2918cd3 default }" containerID=8a317b41d87da9e1d4e21e416435e797cc5741a28efe2befacbd22fa9d66e2fd datapathConfiguration="&{false false false false false }" interface=lxcd830059fd19b k8sPodName=openstack/barbican-ks-endpoints-55rg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a317b41d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a317b41d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a317b41d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identity=61665 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a317b41d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identity=61665 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a317b41d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=855 identity=61665 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a317b41d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=855 identity=61665 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a317b41d8 endpointID=855 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-55rg7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ced200d4-b2c9-4c63-bd9e-aae481b876de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8a317b41d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=855 identity=61665 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-55rg7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 b8a62d25-97d6-42aa-ba9c-8568e595b74a default }" containerID=4d74086cb9fb5ecd8afe1bb8931b022a7a44e8311e7fa7793caa24d595c9986c datapathConfiguration="&{false false false false false }" interface=lxc3825ca46b815 k8sPodName=openstack/barbican-ks-user-98rrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d74086cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d74086cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d74086cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d74086cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identity=18276 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d74086cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identity=18276 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d74086cb9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3314 identity=18276 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d74086cb9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3314 identity=18276 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d74086cb9 endpointID=3314 k8sNamespace=openstack k8sPodName=barbican-ks-user-98rrb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=dc8cd24b-bcfa-44c7-a2d6-033e4850ab86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4d74086cb9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3314 identity=18276 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-98rrb subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.252 9ac1ffc9-54d8-46f3-94d9-aaed302b2304 default }" containerID=9b657152d901d4e09e8c6078e0cde48d4c7462d6c9f2e6b394e6c869f9e246af datapathConfiguration="&{false false false false false }" interface=lxced498c7bf08d k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b657152d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 ipv4=10.0.0.252 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b657152d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.252 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b657152d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=6623 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.252 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b657152d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=6623 ipv4=10.0.0.252 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b657152d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3264 identity=6623 ipv4=10.0.0.252 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b657152d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3264 identity=6623 ipv4=10.0.0.252 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-8dspb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.037425433197613864 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.99 acb33f28-7b9e-4eac-96f3-9be54573f1cc default }" containerID=5a110ef6dfa985182fc1ec89e4778e3d81ebe33779a99032735d969dabbfa21f datapathConfiguration="&{false false false false false }" interface=lxc700099b1d42e k8sPodName=openstack/rook-ceph-detect-version-j8jtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a110ef6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a110ef6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8bcf5003-c882-44c5-833f-738518951196,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8bcf5003-c882-44c5-833f-738518951196,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5a110ef6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=8bcf5003-c882-44c5-833f-738518951196;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=8bcf5003-c882-44c5-833f-738518951196;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a110ef6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=34471 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8bcf5003-c882-44c5-833f-738518951196,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8bcf5003-c882-44c5-833f-738518951196,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a110ef6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=34471 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a110ef6df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2495 identity=34471 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a110ef6df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2495 identity=34471 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a110ef6df endpointID=2495 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-j8jtx subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=8bcf5003-c882-44c5-833f-738518951196 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=8bcf5003-c882-44c5-833f-738518951196 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=5a110ef6df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2495 identity=34471 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j8jtx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 f66f8aa5-d9d9-40ad-a49d-660fde9c56c1 default }" containerID=55e34fe5351cdb0369000a1d22f164e964f1b0e75c460869d56a1673d401c5d8 datapathConfiguration="&{false false false false false }" interface=lxc79f0ce2992d6 k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55e34fe535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55e34fe535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55e34fe535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=33083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55e34fe535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=33083 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55e34fe535 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1306 identity=33083 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=endpoint level=info msg="Successful endpoint creation" containerID=55e34fe535 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1306 identity=33083 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=daemon level=info msg="Delete endpoint request" containerID=55e34fe535 endpointID=1306 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=55e34fe535 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1306 identity=33083 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52c52335-a792-4ea3-a2d1-dc5590adaeca subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 b01cc63f-f0d9-4d53-a4f9-d0c079cc5b95 default }" containerID=c10e4dc535e8f7819ae4c6f6e63d9b4f222f443d4962d9b33da237c5c9187d56 datapathConfiguration="&{false false false false false }" interface=lxc7f3e89530a92 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c10e4dc535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c10e4dc535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c10e4dc535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=21084 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c10e4dc535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=21084 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c10e4dc535 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=78 identity=21084 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c10e4dc535 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=78 identity=21084 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 d637032d-b2de-41bb-b4a5-faa0f71b2a5a default }" containerID=2bc4149c3be9ce5b9a35334f22d14ed31d7b7c78dbacbd8c9a41f5b10e0614ce datapathConfiguration="&{false false false false false }" interface=lxcd756adc01cf5 k8sPodName=openstack/ceph-object-controller-detect-version-zbckb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bc4149c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bc4149c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bc4149c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=24179 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2bc4149c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=24179 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bc4149c3b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=258 identity=24179 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bc4149c3b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=258 identity=24179 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2bc4149c3b endpointID=258 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-zbckb subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=57df66ab-909a-48ec-af8e-91e3d14b37db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=2bc4149c3b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=258 identity=24179 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbckb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 786b9a3f-9411-490e-834b-559a77528a53 default }" containerID=8548fc074db1bd2d7071c371bd86377803fda274aa08c4f418d4a440503ff800 datapathConfiguration="&{false false false false false }" interface=lxc117012c9a470 k8sPodName=openstack/glance-db-init-8tmhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8548fc074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8548fc074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8548fc074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identity=12603 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8548fc074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identity=12603 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8548fc074d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2857 identity=12603 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8548fc074d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2857 identity=12603 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8548fc074d endpointID=2857 k8sNamespace=openstack k8sPodName=glance-db-init-8tmhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=2e0cb512-b798-4128-a4bb-a12aea1f05e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8548fc074d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2857 identity=12603 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-8tmhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 e48dc54c-dfd4-47c6-a8b7-bb2c39741286 default }" containerID=20b18a24aa0e878113be9b9ff4393b946e703c16bde4e7639b3ebdfd5ad7336c datapathConfiguration="&{false false false false false }" interface=lxca2830b0d9486 k8sPodName=openstack/glance-db-sync-j846l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20b18a24aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20b18a24aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=20b18a24aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=7095 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20b18a24aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=7095 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20b18a24aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2788 identity=7095 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l subsys=endpoint level=info msg="Successful endpoint creation" containerID=20b18a24aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2788 identity=7095 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20b18a24aa endpointID=2788 k8sNamespace=openstack k8sPodName=glance-db-sync-j846l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=ef3e2632-7562-429d-a8a0-ce2e3d65d268 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=20b18a24aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2788 identity=7095 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-sync-j846l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 66e88a21-c1c1-4995-bab4-8029c54b81fb default }" containerID=9742623de2dffd1683fdff9bff00a3c3bf292f21cc3d16317f4a30c44931b2a4 datapathConfiguration="&{false false false false false }" interface=lxc9401dedb7e48 k8sPodName=openstack/glance-rabbit-init-pcb7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9742623de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9742623de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9742623de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9742623de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=64854 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9742623de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=64854 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9742623de2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=21 identity=64854 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=9742623de2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=21 identity=64854 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9742623de2 endpointID=21 k8sNamespace=openstack k8sPodName=glance-rabbit-init-pcb7r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7416c6a4-0869-4c7d-bc5b-580625e42278 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9742623de2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=21 identity=64854 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-rabbit-init-pcb7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 d3d9e742-eb4d-4baf-a674-6b909402b984 default }" containerID=8fc7ccbc16d06590d21aaf27bffe8b7b984354b7bb32d78b7d24668c3bc18f8c datapathConfiguration="&{false false false false false }" interface=lxcf4520987443b k8sPodName=openstack/glance-ks-service-tgzl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fc7ccbc16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fc7ccbc16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8fc7ccbc16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fc7ccbc16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=25134 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fc7ccbc16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=25134 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fc7ccbc16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2184 identity=25134 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fc7ccbc16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2184 identity=25134 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8fc7ccbc16 endpointID=2184 k8sNamespace=openstack k8sPodName=glance-ks-service-tgzl9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c1ba0b63-d3d1-4b04-ae27-a639890a869b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8fc7ccbc16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2184 identity=25134 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-tgzl9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 62e220ad-484f-4393-b530-f87eced4a81f default }" containerID=8aab26b44bc84ec0c01c52d16b7004771c31f9bfa267e7c7d91e7e8e31712a3f datapathConfiguration="&{false false false false false }" interface=lxc31e810a44923 k8sPodName=openstack/glance-ks-endpoints-gtpnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aab26b44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aab26b44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8aab26b44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aab26b44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=3080 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aab26b44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=3080 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aab26b44b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1101 identity=3080 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aab26b44b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1101 identity=3080 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 b95c8162-0115-45be-8698-218f2a7280f2 default }" containerID=691bb5529c8b9e13694df00a1093ff060c2cef7bf32932265c69d6450fa66881 datapathConfiguration="&{false false false false false }" interface=lxce651406d8339 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=691bb5529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=691bb5529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=691bb5529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identity=62719 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=691bb5529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identity=62719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=691bb5529c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3859 identity=62719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=691bb5529c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3859 identity=62719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-v95f2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 840aa401-5f1d-4e8b-8e2f-e90bdb4a6640 default }" containerID=b331caac8c050c8c72eea0fbc302a592a9491b23b98aad199230f38882b5806d datapathConfiguration="&{false false false false false }" interface=lxc5648add53733 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b331caac8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b331caac8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b331caac8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=25430 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b331caac8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=25430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b331caac8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1514 identity=25430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b331caac8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1514 identity=25430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-gttgc subsys=daemon level=info msg="Delete endpoint request" containerID=8aab26b44b endpointID=1101 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-gtpnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=831e4f94-64c0-4fb9-9f5c-321e7bbdb344 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8aab26b44b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1101 identity=3080 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-gtpnb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 299763d4-c8a8-416e-9789-591dae577021 default }" containerID=5d30015bef1ac5c45a7427a433b6f9e98c16a341317af0ff1d21e30876b9496c datapathConfiguration="&{false false false false false }" interface=lxc96b10a898ccf k8sPodName=openstack/glance-ks-user-x74vp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d30015bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d30015bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d30015bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=53261 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d30015bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=53261 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d30015bef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1559 identity=53261 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d30015bef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1559 identity=53261 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d30015bef endpointID=1559 k8sNamespace=openstack k8sPodName=glance-ks-user-x74vp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=7c3dfbdf-c7b9-413d-a2bc-c3b573b2c0e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5d30015bef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1559 identity=53261 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-x74vp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 9ca88ec9-c143-4cb4-9cf0-0739fcfddc96 default }" containerID=5f63ecc00fa77aeb88ce0e8eae7929b6c534effe04618116a4b3a731277765e5 datapathConfiguration="&{false false false false false }" interface=lxc7b6d6520abfa k8sPodName=openstack/glance-metadefs-load-8xdbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f63ecc00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f63ecc00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5f63ecc00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5f63ecc00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=60300 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f63ecc00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=60300 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f63ecc00f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=611 identity=60300 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f63ecc00f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=611 identity=60300 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f63ecc00f endpointID=611 k8sNamespace=openstack k8sPodName=glance-metadefs-load-8xdbr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fab6dd10-82e8-426f-ac40-3debd48830e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5f63ecc00f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=611 identity=60300 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-metadefs-load-8xdbr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 e180e9bb-8b03-4f8c-a7f8-56879d75723e default }" containerID=bc70d0b0588e0597a57a9fa6d97c0e211414dac7735b1d7eb5b44ea099d128e3 datapathConfiguration="&{false false false false false }" interface=lxc70561fd6baad k8sPodName=openstack/glance-storage-init-cmn2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc70d0b058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc70d0b058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7838570d-7933-4839-99fe-fdf524050bef,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=7838570d-7933-4839-99fe-fdf524050bef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bc70d0b058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7838570d-7933-4839-99fe-fdf524050bef;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=7838570d-7933-4839-99fe-fdf524050bef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc70d0b058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=36684 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7838570d-7933-4839-99fe-fdf524050bef,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=7838570d-7933-4839-99fe-fdf524050bef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc70d0b058 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=77 identity=36684 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc70d0b058 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=77 identity=36684 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc70d0b058 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=77 identity=36684 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc70d0b058 endpointID=77 k8sNamespace=openstack k8sPodName=glance-storage-init-cmn2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7838570d-7933-4839-99fe-fdf524050bef k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=7838570d-7933-4839-99fe-fdf524050bef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bc70d0b058 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=77 identity=36684 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-storage-init-cmn2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 7dc7011b-5d64-46ac-8a8f-8910b9335ceb default }" containerID=83662a80050629040ebb45c467e24c193bbc65edf21452c471e1f7013946fa32 datapathConfiguration="&{false false false false false }" interface=lxc278d684c2a69 k8sPodName=openstack/glance-api-6b5946b89f-blkmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83662a8005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83662a8005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=83662a8005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=83662a8005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=21100 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83662a8005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=21100 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83662a8005 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=555 identity=21100 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=83662a8005 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=555 identity=21100 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/glance-api-6b5946b89f-blkmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 970e769c-8e66-4ec9-b0cf-6834ee42de49 default }" containerID=90b70451feda8b7b9fef0edd79c902ab17159addd7e703679c8c8414c51f6a19 datapathConfiguration="&{false false false false false }" interface=lxcbe0903052dcb k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90b70451fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90b70451fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90b70451fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=13193 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90b70451fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=13193 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 d948e3be-47c1-49ae-a89c-f3a626ed1d2d default }" containerID=729077062df15be080739a4ac3e8f9ee0b682f97a30b55c68af4506189a7cc5c datapathConfiguration="&{false false false false false }" interface=lxc8beecc94f453 k8sPodName=openstack/staffeln-api-759df668fb-fxbqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=729077062d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-api-759df668fb-fxbqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=729077062d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-api-759df668fb-fxbqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=729077062d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=19419 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-api-759df668fb-fxbqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=729077062d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=19419 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-api-759df668fb-fxbqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 8391e1c8-685d-4b1c-a018-690bd5001728 default }" containerID=0804254037ae2d38274840fa22a458d5f1662534dcdc69acb70678a44c4391b9 datapathConfiguration="&{false false false false false }" interface=lxcd9bba2c0f603 k8sPodName=openstack/staffeln-db-init-sxmt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0804254037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0804254037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0804254037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=34040 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0804254037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=34040 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90b70451fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1484 identity=13193 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=90b70451fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1484 identity=13193 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/staffeln-conductor-6978b84dc5-2djbr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=729077062d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1926 identity=19419 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-api-759df668fb-fxbqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=729077062d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1926 identity=19419 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-api-759df668fb-fxbqd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0804254037 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1542 identity=34040 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0804254037 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1542 identity=34040 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0804254037 endpointID=1542 k8sNamespace=openstack k8sPodName=staffeln-db-init-sxmt5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1fc344d4-370d-4224-b3b0-873dfd44d827 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0804254037 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1542 identity=34040 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-sxmt5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 791561f4-f811-4b82-a663-2b18c37eac9e default }" containerID=7e1c688d513e209e4d34d0f6c3f7782f7be80d6f4a6f2efc0a506dc6c8e6760d datapathConfiguration="&{false false false false false }" interface=lxca51c0fb2680b k8sPodName=openstack/staffeln-db-sync-v5cfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e1c688d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-v5cfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e1c688d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=74ba1bc6-30f2-406d-8d0e-db87e8d9ccda,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=74ba1bc6-30f2-406d-8d0e-db87e8d9ccda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-v5cfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=74ba1bc6-30f2-406d-8d0e-db87e8d9ccda;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=74ba1bc6-30f2-406d-8d0e-db87e8d9ccda;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e1c688d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=37114 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=74ba1bc6-30f2-406d-8d0e-db87e8d9ccda,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=74ba1bc6-30f2-406d-8d0e-db87e8d9ccda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-v5cfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e1c688d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=37114 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-v5cfb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e1c688d51 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=138 identity=37114 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-v5cfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e1c688d51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=138 identity=37114 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-v5cfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager